JagaShieldBahasa Malaysia

How to check a scammer's phone number or bank account

Last verified: 20 Aug 2026

Use Semak Mule (semakmule.rmp.gov.my) — the official portal run by PDRM's Commercial Crime Investigation Department (CCID). Enter a bank account number or phone number and it shows whether that number has a fraud report against it. Free, no sign-up. Important: "no record" doesn't mean safe — scammers constantly rotate to fresh mule accounts.

Step by step

1. Go to semakmule.rmp.gov.my directly by typing the address — don't tap a link from a message. Lookalike portals impersonating this exact site exist.

2. Choose to check a bank account or a phone number.

3. Enter the number and search.

4. A record comes back → don't proceed with the transaction. If you've already paid → call 997 and your bank immediately, then lodge a police report at a station (official sources disagree on whether 997 now replaces it, so do it anyway). See the first 24 hours guide.

5. No record comes back → treat that as "unknown," not "clean." Verify the company through SSM's own register and the BNM/SC alert lists before paying — see how to verify an investment company.

What Semak Mule actually holds (as at 30 Oct 2025)

299,531 bank accounts, 233,568 phone numbers and 7,867 companies that have been reported in connection with fraud (The Star, 30 Oct 2025, citing CCID). This figure is dated — it moves as the portal's own counters update.

If your browser shows a certificate warning on the real portal, that's a known server-side certificate-chain issue on the government site, not proof of a fake — but check that the address bar reads exactly semakmule.rmp.gov.my, because lookalike portals do exist. The address is what to check, not the padlock icon.

Three different checks — don't conflate them

SSM confirms a company is registered — not licensed. BNM's and the SC's licensed-entity registers confirm a company is licensed. BNM's Financial Consumer Alert List and the SC's Investor Alert List are warning lists only — BNM states expressly that absence or removal from the FCA List is not confirmation that an entity is or has been licensed.

Want to check a message or invoice instead?

Paste it straight into our free checker — we match it against known Malaysian scam patterns and the official alert lists.

FAQ

Is Semak Mule safe to use?

Yes — it's PDRM's (CCID's) own official portal. The address is semakmule.rmp.gov.my — type it directly rather than following a link.

What if my own number comes back with a record?

This can happen if your account was used without your knowledge, or if a report was filed against you in error. Contact your bank and consider lodging a police report to have your objection on record.

Can I check a foreign WhatsApp number?

Semak Mule checks Malaysian bank accounts and phone numbers reported to PDRM. A foreign number may simply not be in this database — treat any unsolicited contact from an unfamiliar foreign number with extra caution regardless of what the lookup shows.

Checklist

  • Go to semakmule.rmp.gov.my directly — never click a link from a message
  • Choose bank account or phone number lookup, enter it, check
  • A record → don't proceed; already paid → call 997 and your bank, then report to police within 24 hours
  • No record → treat as unknown, not clean — check SSM and BNM/SC alert lists too